Skip to content
Express middleware for including the token generated by Connect's CSRF middleware in the locals object for templates.
JavaScript
Find file
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Failed to load latest commit information.
test
.gitignore
LICENSE-MIT
README.md
index.js
package.json

README.md

express-csrf-local

Express middleware for including the token generated by Connect's CSRF middleware in the locals object for templates.

Installation

npm install express-csrf-local

Usage

var express = require('express');
var app = express();

app.configure(function() {
  // configurations
  // ...
  app.use(express.csrf());
  app.use(require('express-csrf-local')('csrf_token'));
  // ...
});

The string argument express-csrf-local is invoked with is the name of the local that will be contain the CSRF token. This argument is optional and if it's not provided, the name of the local will default to token.

Be sure to register the CSRF middleware before registering the middleware provided by express-csrf-token, otherwise you'll run into issues.

Testing

npm install
npm test

Issues

Found a bug? Create an issue on GitHub.

https://github.com/jharding/express-csrf-local/issues

Versioning

For transparency and insight into the release cycle, releases will be numbered with the follow format:

<major>.<minor>.<patch>

And constructed with the following guidelines:

  • Breaking backwards compatibility bumps the major
  • New additions without breaking backwards compatibility bumps the minor
  • Bug fixes and misc changes bump the patch

For more information on semantic versioning, please visit http://semver.org/.

License

Copyright (c) 2012 Jake Harding
Licensed under the MIT License.

Something went wrong with that request. Please try again.